CVE-2026-57441

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem-equivalent segment names. On...

CVE-2026-57441

MCPVault , a lightweight Model Context Protocol server for safe file access in an Obsidian vault , contains a path-filter bypass in PathFilter (src/pathfilter.ts) prior to 0.11.4 . The deny-list for restricted directories (.git, .obsidian, node_modules) is compiled case-sensitively and compared w...

CVE-2024-3094

CVE-2024-3094 I've moved my notes in Obsidian to a separate vault and this GitHub repository to be able to share it. The start page is CVE-2024-3094 xz supply chain. Installation Clone the repo with git. root@kitploit: git clone https://github.com/reuteras/CVE-2024-3094.git Then open the checked...